ISP difficulties (1 Viewer)

[egg_]

Have a weird thing going on here. Can't connect to various URLs, but only on Apple devices.

Examples:
https://asana.com

Apple Developer

There’s never been a better time to develop for Apple platforms.

developer.apple.com

thumped.com - thumped.com

thumped.com

Also some work stuff, which is a problem. Google is ok, FB is ok, Wikipedia is ok

Ping works ok, curl does not. Can connect ok on Android and Windows. Can connect using the apple devices if I go via a phone hotspot over the mobile network

ISP guys are trying to be helpful but so far none of them have figured it out. @pete any ideas? Isn't there another network guy here too? @ernesto maybe? Or @rettucs?

 

[egg_]

Ok never mind, they finally figured out that "parental control" had been activated in the router, and that was the problem. Must be a fairly terrible implementation of parental control :/

 

[egg_]

This is what curl was showing me btw in case anyone is interested:

[datapipelines (T313412)]$ curl -v <url>
* Trying 151.101.193.187...
* TCP_NODELAY set
* Connected to asana.com (151.101.193.187) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/cert.pem
CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* LibreSSL SSL_connect: SSL_ERROR_SYSCALL in connection to asana.com:443
* Closing connection 0
curl: (35) LibreSSL SSL_connect: SSL_ERROR_SYSCALL in connection to asana.com:443
[datapipelines (T313412)]$

 

[pete]

Any idea why those were classed as something a parent would want to control?

 

[pete]

This is what curl was showing me btw in case anyone is interested:

[datapipelines (T313412)]$ curl -v <url>
* Trying 151.101.193.187...
* TCP_NODELAY set
* Connected to asana.com (151.101.193.187) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/cert.pem
CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* LibreSSL SSL_connect: SSL_ERROR_SYSCALL in connection to asana.com:443
* Closing connection 0
curl: (35) LibreSSL SSL_connect: SSL_ERROR_SYSCALL in connection to asana.com:443
[datapipelines (T313412)]$

i can't remember the option to enable it but i'm guessing if you ran that in verbose mode (-V?) you'd see more detail about the SSL cert mismatch that caused CURL to fail. There's another option (that i also can't remember right now) to tell CURL to ignore those errors.

 

[egg_]

That's the output from verbose mode. I actually had piddled about with parental controls about 18 months ago during The Worst Lockdown when one of the kids was staying up half the night falling into youtube rabbit holes, but ended up turning it off cos it was blocking stuff unpredictably. I guess the ISP must have turned it back on centrally but accident

 

[pete]

That's the output from verbose mode. I actually had piddled about with parental controls about 18 months ago during The Worst Lockdown when one of the kids was staying up half the night falling into youtube rabbit holes, but ended up turning it off cos it was blocking stuff unpredictably. I guess the ISP must have turned it back on centrally but accident

ha i didn't even notice your -v

i recall seeing more detail when troubleshooting api calls over a proxy doing ssl inspection a while back

 

[pete]

curl --insecure is the thing i did